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DETAILED ACTION 



Specification 

The disclosure is objected to because of the following informalities: Parings is 
misspelled In the title "APPARATUS AND METHOD FOR GENERATING AND 
VERIFYING ID-BASED BLIND SIGNATURE BY USING BILINEAR PARINGST. It 
should be "APPARATUS AND METHOD FOR GENERATING AND VERIFYING ID- 
BASED BLIND SIGNATURE BY USING BILINEAR PAIRINGS". Also, Parings is 
misspelled In the abstract, paragraph [0001], paragraph [0006], paragraph [0009], 
paragraph [0015], paragraph [0021], and paragraph [0041]. Appropriate correction is 
required. 

The disclosure is objected to because of the following informalities: In paragraph 
[0034], the verification of the signature is justified by the following equations: 
e(V,P)= e(cirV,P) 

= e(U'.+ Hi(m,U')Q,D. Ppub) 

The comma after U' should be removed. It should be 
e(V',P)=e(aV.P) 

= e(U' + Hi(m,U')Q,D, Ppub) 
Appropriate correction is required. 
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Claim Objections 

Claims 1 and 6 are objected to because of the following infomialities: Parings is 
misspelled in claims 1 and claim 6. Appropriate correction is required. 

Claims 5 and 10 are objected to because of the following informalities: The 
following equations: 

e(V.P)= e(aV.P) 

= e(U',+ Hi(m,U')QiD. Ppub) 
The comma after U' should be removed. It should be 
e(V',P)=e(aV,P) 

= e(U' + Hi(m,U')QiD. Ppub) 
Appropriate correction is required. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made In this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1 ) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21 (2) 
of such treaty in the English language. 
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102 (e) as being anticipated by Boneli et al 



Claims 1 and 6 

As per claims 1 and 6, Boneh discloses a system/method for identity-based 
encryption and related cryptographic techniques, comprising the steps of: 

generating system parameters, selecting a master key, and then disclosing the 
system parameters by a tmst authority (Abstract; Figures 1-3. 5-12; Columns 1-10, 12- 
16. 21-36; Column 37, lines 1-11); 

generating a private key by using a signer's identity and the master key, and then 

transfemng the private key to the signer through a secure channel by the tmst 
authority (Abstract; Figures 1-3. 5-12; Columns 1-10. 12-16. 21-36; Column 37, lines 1- 
11): 

receiving and storing the system parameters by a user and receiving and storing 
the system parameters and the private key by the signer (Abstract; Figures 1-3, 5-12; 1- 
10, 12-16. 21-36; Column 37, lines 1-11); 

computing a commitment by using at least one of the system parameters, and 
then sending the commitment to the user by the signer (Abstract; Figures 1-3, 5-12; 
Columns 1-10, 12-16. 21-36; Column 37. lines 1-11); 

blinding a message by using the commitment and a public key based on the 
signer's identity, and then sending the blinding message to the signer by the user 
(Abstract; Figures 1-3. 5-12; Columns 1-10, 12-16, 21-36; Column 37, lines 1-11); 
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signing the blinding message by using the private key. and then sending the 
signed message to the user by the signer (Abstract; Figures 1-3, 5-12; Columns 1-10, 
12-16, 21-36; Column 37, lines 1-11); 

unwinding the signed message by the user; and verifying the signature by the 
user (Abstract; Figures 1-3, 5-12; 1-10. 12-16. 21-36; Column 37, lines 1-11). 

(a) the invention was known or used by others in this country, or patented or described in a printed 
publication in this or a foreign country, before the invention thereof by the applicant for a patent. 

Claims 1-10 are rejected under 35 U.S.C. 102(a) as being anticipated by Fangguo 
Zhang and Kwangjo Kim (Efficient ID-Based Blind Signature and Proxy Signature from 
Bilinear Pairings, Publisher Springer Bertin/Heidelberg, ISSN 0302-9743, Volume 
2727/2003, Book Information Security and Privacy, 2003, ISBN 978-3-540-40515-3, 
Pages 312-323). 

Claim 1 

Zhang and Kim disclose a method for generating and verifying an ID-based blind 
signature by using bilinear parings, the method comprising the steps of: 

generating system parameters, selecting a master key. and then disclosing the system 
parameters by a trust authority (Page 315. section 3.2, lines 12-17; Page 314, section 2, 
lines 10-14); The center publishes system parameters params = {Gi, G2, e, q, P, Ppub, 
Hi, H2}. A Tmst Authority (TA) is equivalent to a Key Generation Center (KGC). The 
KGC keeps s as a master key 
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generating a private key by using a signer's identity and the master key, and tlien 
transferring the private key to the signer through a secure channel by the tmst authority 
(Page 315, section 3.2, lines 15-20; Page 316, lines 6-11; Page 314, section 2, lines 10- 
14); A user submits his/her identity infomiation ID to the Key Generation Center (KGC). 
The KGC computes the user's public key as Qid = H2(ID), and returns private key Sid = 
sQiD . KGC keeps s is a master key. The Trust Authority (TA) is equivalent to the Key 
Generation Center (KGC). 

receiving and storing the system parameters by a user and receiving and storing the 
system parameters and the private key by the signer (Page 316, lines 7-11); The KGC 
publishes system parameters params = {Gi, G2, e. q, P, Ppub, Hi, H2}. A private key is 
SiD, where Sid = sQid- 

computing a commitment by using at least one of the system parameters, and then 
sending the commitment to the user by the signer (Page 316, line 28); Computes U = 
rQiD, where Qid = H2(ID). H2 is one of the system parameters params = {Gi, G2, e, q, 
P, Ppub. Hi and H2}. 

blinding a message by using the commitment and a public key based on the signer's 
identity, and then sending the blinded message to the signer by the user (Page 316, 
lines 30-32); 

signing the blinded message by using the private key, and then sending the signed 
message to the user by the signer (Page 316, line 33); 

unblinding the signed message by the user (Page 316, line 34); and 
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verifying the signature by the user (Page 317, lines 1-3), 

wherein the system parameters include Gi, G2, e, q, P, Ppub, Hi and H2, where Gi is a 
cyclic additive group whose order is a prime q, G2 is a cyclic multiplicative group of the 
same order q, e is a bilinear paring defined by e: GixGi^ G2, P is a generator of Gi, 
Ppub is a trust authority's public key having relationship of Ppub=s.P, where s is the 
master l^ey, and Hi and H2 are hash functions, respectively, described by Hi: {0,1}* 
Zq* and H2: {0,1}* -> Gi, where Zq* is a cyclic multiplicative group (Page 315, section 
3.2, lines 12-17; Page 316, lines 6-8), 

wherein the public key Qid is described by Qid = H2(ID), where ID Is the signer's identity, 
and the private key Sid is described by Sid = sQid (Page 315, section 3.2, lines 12-17; 
Page 316, lines 10-11), and 

wherein the commitment U is described by U = r. Qid, where r is a random number the 
signer chooses (Page 316, lines 28-29). 

Claim 2 

Zhang and Kim disclose the method of claim 1 , wherein the blinded message h is 
described by h=a "^Hi(m, U')+ /? , where m is a message to be sent, U' is described 
by U'=a U+ a /7Qid and a and /? are blinding factors belonging to Zq* (Page 316, lines 
28-32). 

Claim 3 

Zhang and Kim disclose the method of claim 2, wherein the signed message Is 
described by V=(r+h)SiD (Page 316, line 33). 
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Claim 4 

Zhang and Kim disclose the method of claim 3, wherein the step of unblinding is 
performed by using formula V =a V (Page 316, line 34). 

Claim 5 

Zhang and Kim disclose the method of claim 4, wherein the step of verifying is 
preformed by using following equations: e(V,P) =e(U', +Hi (m,U')QiD,Ppub) (Page 317, 
line 3, lines 9-15). 

Claim 6 

Zhang and Kim disclose an apparatus for generating and verifying an ID-based blind 
signature by using bilinear parings, the apparatus comprising: 

means for generating system parameters, selecting a master key, and then disclosing 
the system parameters by a trust authority (Page 315, section 3.2, lines 12-17; Page 
314, section 2, lines 10-14); 

means for generating a private key by using a signer's identity and the master key, and 
then transferring the private key to the signer through a secure channel by the trust 
authority (Page 315, section 3.2, lines 15-20; Page 316, lines 6-11 ; Page 314. section 
2, lines 10-14); 

means for receiving and storing the system parameters by a user and receiving and 
storing the system parameters and the private key by the signer (Page 316, lines 7- 
11): 
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means for computing a commitment by using at least one of the system parameters, 
and then sending the commitment to the user by the signer (Page 316, line 28); 

means for blinding a message by using the commitment and a public key based on the 
signer's identity, and then sending the blinded message to the signer by the user 
(Page 316, lines 30-32); 

means for signing the blinded message by using the private key, and then sending the 
signed message to the user by the signer (Page 316, line 33); 

means for unblinding the signed message by the user; and means for verifying the 
signature by the user (Page 316, line 34), 

wherein the system parameters include Gi, G2, e, q, P, Ppub, Hi and H2, where Gi is a 
cyclic additive group whose order is a prime q, G2 is a cyclic multiplicative group of the 
same order q, e is a bilinear paring defined by e: GixGi-» G2, P is a generator of Gi, 
Ppub is a trust authority's public key having relationship of Ppub=s.P, where s is the 
master key, and Hi and H2 are hash functions, respectively, described by Hi: {0,1}* 
Zq* and H2: {0,1}* -> Gi, where Zq* is a cyclic multiplicative group (Page 315, section 
3.2. lines 12-17; Page 316, lines 6-8), 

wherein the public key Qid is described by Qid = H2(ID). where ID is the signer's identity, 
and the private key Sid is described by Sid = sQiD(Page 315, section 3.2, lines 12-17; 
Page 316, lines 10-11), and 

wherein the commitment U is described by U = r. Qid, where r is a random number the 
signer chooses (Page 31 6, lines 28-29). 
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Claim 7 

Zhang and Kim disclose the apparatus of claim 6, wherein the blinded message h is 
described by h=a '^H^{n\, U')+ /? , where m is a message to be sent, U' is described by 
U'=a U+ a /?QiD and a and are blinding factors belonging to Zq* (Page 316, lines 
28-32). 

Claim 8 

Zhang and Kim disclose the apparatus of claim 7, wherein the signed message is 
described by V=(r+h)SiD (Page 316, line 33). 

Claim 9 

Zhang and Kim disclose the apparatus of claim 8, wherein the means for unblinding is 
performed by using formula V'=a V (Page 316, line 34). 

Claim 10 

Zhang and Kim disclose the apparatus of claim 9, wherein the means for verifying Is 
preformed by using following equations: e(V',P)=e(U',+Hi(m,U')QiD.Ppub) (Page 317, line 
. 3, lines 9-15). 

Double Patenting 

The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the 
unjustified or improper timewise extension of the "right to exclude" granted by a patent 
and to prevent possible harassment by multiple assignees. A nonstatutory 
obviousness-type double patenting rejection Is appropriate where the conflicting claims 
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are not identical, but at least one examined application claim is not patentably distinct 
from the reference claim(s) because the examined application claim is either anticipated 
by, or would have been obvious over, the reference claim(s). See, e.g.. In re Berg, 140 
F 3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 
USPQ2d 2010 (Fed. Cir. 1993); In re Long!, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 
1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 
F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 
USPQ 644 (CCPA 1969). 

A timely filed temiinal disclaimer In compliance with 37 CFR 1 .321(c) or 1 .321(d) 
may be used to overcome an actual or provisional rejection based on a nonstatutory 
double patenting ground provided the conflicting application or patent either is shown to 
be commonly owned with this application, or claims an invention made as a result of 
activities undertaken within the scope of a joint research agreement. 

Effective January 1 , 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully comply with 
37 CFR 3.73(b). 



Claims 1 and 6 are provisionally rejected on the ground of nonstatutory 
obviousness-type double patenting as being unpatentable overclaims 1-3 and 8-10 of 
copending application 10747188 (Publication No: US20050005126). Although the 
conflicting claims are not identical, they are not patentably distinct from each other 
because for the following reasons. 

For claim 1 , the Examiner gives a broad Interpretation of a method for generating 
and verifying an ID-based blind signature using bilinear pairings. A ID-based proxy 
signature includes a ID-based blind signature. 

Claim 1 maps to claim 1 , 2, and 3 of copending application. 

The system parameters include Gi, G2, e, q, P, Ppub, Hi and H2, where Gi is a cyclic 
additive group whose order Is a prime q. G2 is a cyclic multiplicative group of the same 
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order q, e is a bilinear paring defined by e: GixGi-^ G2, P is a generator of Gi, Ppub is a 
trust authority's public key having relationship of Ppub=s.P, where s is the master key, 
and Hi and H2 are hash functions, respectively, described by Hi: {0,1}* Zq* and H2: 
{0,1}* -> Gi, where Zq* is a cyclic multiplicative group. 

The public key Qid is described by Qid = H2(ID), where ID Is the signer's identity, 
and the private key Sid is described by Sid = sQid. (Qa = H2(A) , Sa = sQa ) and (Qb = 
H2(B) , Sb = sQb ) are equivalent to (Qid = H2(ID) , Sid = sQid). 

Claim 6 maps to claim 8, 9, and 10 of copending application. 

The system parameters include Gi, G2, e, q, P, Ppub. Hi and H2, where Gi is a 

cyclic additive group whose order Is a prime q, G2 is a cyclic multiplicative group of the 

same order q, e is a bilinear paring defined by e: GixGi-> G2, P is a generator of Gi, 

Ppub is a trust authority's public key having relationship of Ppub=s.P, where s Is the 

master key, and Hi and H2 are hash functions, respectively, described by Hi: {0,1}* ^ 

Zq* and H2: {0,1}* -> Gi, where Zq* is a cyclic multiplicative group. 

The public key Qid is described by Qid = H2(ID). where ID is the signer's identity, 

and the private key Sid is described by Sid = sQid. (Qa = H2(A) , Sa = sQa ) and (Qb = 

H2(B) , Sb = sQb ) are equivalent to (Qid = H2(ID) , Sid = sQid). 



This is a provisional obviousness-type double patenting rejection because the 
conflicting claims have not in fact been patented. 
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Conclusion 

The prior arts made of record and not relied upon are considered pertinent to applicant's 
disclosure. The Zhang et al. (Pub. No.: US 20040123110 A1) disclose an apparatus 
and method for ID-based ring structure by using bilinear pairings. The Boneh et al. 
(Patent Number: 7,1 13,594 B2) disclose systems and methods for identity-based 
encryption and related cryptographic techniques. The Chaum (Patent Number: 
4,759,063) discloses blind signature systems. The Zhang, Safavi-Naini, and Lin 
disclose a new proxy signature, proxy blind signature and proxy ring signature schemes 
from bilinear pairings. 

Any inquiry conceming this communication or earlier communications from the 
examiner should be directed to Canh Le whose telephone number is 571-270-1380. 
The examiner can nomnally be reached on Monday to Friday 7:30AM to 5:00PM other 
Friday off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Walter Griffin can be reached on 571-272-1447. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
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For more information about the PAIR system, see http://Dair-direct.uspto.qov . Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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